The EU has the ePrivacy Directive 2002/58/EC. Article 13 prohibits the use of email addresses for marketing purposes. The Directive establishes the opt-in regime, where unsolicited emails may be sent only with prior agreement of the recipient.

The Internet is the wild wild west, lots of scummy practices (including shadow profiles).